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1. 



An unauthorized- alteration detecting method comprising: 



a step in which a processing section specifies a 
modulus an order N, and a root a, which are parameters of 
number theoretic transform; 

a step in which the processing section reads from a 
storage section an original -image block fi,-j(x, y) obtained 
by block -dividing an original image [f] to which embedding 
is to be applied; 

a step in which the processing section uses the modulus 
P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -image block fi,-)(x, 
y) to calculate the number- theoretic- transformed block Fi,j(x, 
y) of the original -image block; 

a step in which the processing section determines an 
embedding position (x' , y' ) of a signature image in each 
block according to a predetermined randomizing function; 

a step in which the processing section reads from the 
storage section a pixel value gi.j of the signature image to 
be embedded; 

a step in which the processing section obtains an 
embedding eunount 5 in each block from the number- theoretic- 
transformed block Fi,j(x', y') of the original -image block at 
the embedding position, the pixel value gi^j of the signature 
image, and embedding strength b; 

a step in which the processing section adds or 
subtracts the embedding amount 6 to or from the number- 
theoretic-transformed block Fi,j{x, y) of the original -image 
block, based on (x, y) to obtain the number -theoretic- 
transformed block Hi,j(x, y) of an embedding- applied- image 
block; 



a step in which the processing section applies inverse 
number theoretic vtransform to the number- theoretic - 
transformed block Hi,j{x^ y) to obtain the embedding -applied- 
image block hi,-,(x, y); and 
5 a step in which the processing section obtains the 

embedding- applied- image block hi,j(x, y) for each of all (i, 
j ) blocks or a desired range of ( i , j ) blocks to obtain an 
embedding -applied image [h] , and stores it in the storage 
section and/or outputs it from an output section or an 
10 interface. 

2. An unauthorized-alteration detecting method comprising: 

a step in which a processing section reads from a 
storage section, an input section, or an interface an 

15 embedding-applied- image block hi,j(x, y) obtained by block- 
dividing an embedding-applied image [h] ; 

a step in which the processing section specifies a 
modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

20 a step in which the processing section applies the 

number theoretic transform to the embedding-applied- image 
block hi,j(x, y) to calculate the number -theoretic- 
transformed block Hi,j(x, y) of the embedding-applied- image 
block; 

25 a step in which the processing section determines an 

extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function; 

a step in which the processing section obtains a 

30 remainder by dividing the number-theoretic-transformed block 
Hi.j{x', y') at the extraction position by embedding strength 
e to extract a pixel value gi,j of the signature image; and 



a step in which the processing section obtains the 
pixel value gi,j of tlie signature image in each of all (i, j) 
blocks or a desired range of (i, j) blocks to obtain the 
signature image [g], and stores it in the storage section 
5 and/or outputs it from a display section, an output section, 
or an interface. 

3. An unauthorized- alteration detecting method comprising 
an embedding process for embedding a signature image into an 
10 original image and an extraction process for extracting the 
signature image, 

wherein the embedding process comprises : 

a step in which a processing section specifies a 
modulus P, an order N, and a root a, which are parameters of 

15 number theoretic transform; 

a step in which the processing section reads from a 
storage section an original -image block fi,j(x, y) obtained 
by block-dividing an original image [f] to which embedding 
is to be applied; 

20 a step in which the processing section uses the modulus 

P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -image block fi,j(x, 
y) to calculate the number-theoretic-transformed block Fi,j(x, 
y) of the original -image block; 

25 a step in which the processing section determines an 

embedding position (x' , y' ) of a signature image in each 
block according to a predetermined randomizing function; 

a step in which the processing section reads from the 
storage section a pixel value gi,j of the signature image to 

30 be embedded; 

a step in which the processing section obtains an 
embedding eunount 8 in each block from the number- theoretic- 



transformed block Fi,j(x' , ) of the original -image block at 
the embedding position, the pixel value gi.j of the signature 
image, and embedding strength e; 

a step in which the processing section adds or 
5 subtracts the embedding amount 8 to or from the number- 
theoretic -transformed block Fi,j(x, y) of the original -image 
block, based on (x, y) to obtain the number- theoretic- 
transformed block Hi,j(x, y) of an embedding -applied -image 
block; 

10 a step in which the processing section applies inverse 

number theoretic transform to the number- theoretic - 
transformed block Hi,-j(x, y) to obtain the embedding -applied - 
image block hi,j(x, y); and 

a step in which the processing section obtains the 

15 embedding- applied- image block hi,j(x, y) for each of all (i, 
3) blocks or a desired range of (i, J) blocks to obtain an 
embedding- applied image [hi , and stores it in the storage 
section and/or outputs it from an output section or an 
interface, 

20 and 

the extraction process comprises: 

a step in which the processing section reads from the 
storage section, the input section, or the interface an 
embedding -applied- image block hi,j(x, y) obtained by block- 
25 dividing an embedding- applied image [h]; 

a step in which the processing section specifies a 
modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

a step in which the processing section applies the 
30 number theoretic transform to the embedding -applied -image 
block hi,j(x, y) to calculate the number- theoretic - 
transformed block Hi,j(x, y) of the embedding -applied -image 




block; 

a step in which the processing section determines an 
extraction position (x" , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
5 randomizing function; 

a step in which the processing section obtains a 
remainder by dividing the number-theoretic-transformed block 
Hi,j(x', y') at the extraction position by embedding strength 
e to extract a pixel value gi,j of the signature image; and 
10 a step in which the processing section obtains the 

pixel value gi^j of the signature image in each of all (i^ J) 
blocks or a desired range of (i, j) blocks to obtain the 
signature image [g], and stores it in the storage section 
and/or outputs it from a display section, the output section, 
15 or the interface. 

4. An unauthorized-alteration detecting method according to 
Claim 1 or 3, further comprising a step in which the 
processing section transmits the modulus P and the 

20 embedding -applied image [h] , and, if necessary, the order N 
to an extraction- side apparatus through the output section 
or the interface. 

5. An unauthorized- alteration detecting method according to 
25 Claim 2 or 3, further comprising a step in which the 

processing section receives the modulus P, which is a 
parameter of the number theoretic transform, and the 
embedding -applied image [h] , and, if necessary, the order N 
from a transmission- side apparatus. 

30 

6. An unauthorized- alteration detecting method according to 
one of Claims 1 to 3, further comprising a step in which the 



processing section obtains the original Image [f] according 
to the embedding -applied Image th] and the signature Image 

[g]. 

5 7. An unauthorized-alteration detecting method according to 
one of Claims 1 to 3, wherein P Is any compound number 
generated by a power of a prime number. 

8. An unauthorized -alter at Ion detecting method according to 
10 one of Claims 1 to 3^ wherein N Is common to an embedding 
side and an extraction side of the signature Image and 
stored In advance In the storage section, or Is transferred 
from the embedding side to the extraction side. 

15 9. An unauthorized-alteration detecting method according to 
one of Claims 1 to 3, wherein the processing section selects 
the order N among candidates of the order N, obtained by 
N|GCD[(pi - 1), (p2 - 1), (Pro - 1)] according to a 

predetermined priority. 

20 

10. An unauthorized-alteration detecting method according 
to one of Claims 1 to 3, wherein the processing section 
calculates the root a uniquely determined according to a 
predetermined expression of the Chinese remainder theorem or 

25 others, based on the modulus P and the order N specified. 

11. An unauthorized- alteration detecting method according 
to one of Claims 1 to 3, wherein 

the processing section specifies P expressed by P = 
30 Pi^^P2'^^- . .Pro™# where pi Is a prime number and ri Is a positive 
Integer; 

the processing section selects the order N among 



positive Integers sa.tisfying N|GCD[{pi > 1), (pz - 1), 
(Pro - 1)], or reads the order N from the storage section; 

the processing section calculates a root ai.i of the 
order N with respect to the modulus pi; 
5 the processing section obtains a root a2,± of the order 

N with respect to the modulus pi""^ from ai,i; and 

the processing section obtains the root a of the order 
N with respect to the modulus P from aa.i according to the 
Chinese remainder theorem. 

10 

12. An unauthorized- alteration detecting method according 
to one of Claims 1 to 3, wherein the processing section uses 
P, and a to execute the number theoretic transform 
between x(n) and X(k) by the following expressions, 

N-l 

^(*^) = a:(n)a'^" (mod P) (1) 

N-l 

x{n) = iV-^ J2 ^(A:)a-*" (mod P) (2) 

fc=0 

15 

wherein P is any compound number generated by a power of a 
prime number, a is a positive integer, N is the minimum 
positive integer satisfying a*^ = 1 (mod P) , 
X = [Tlx 
20 X = [T]"^X 

[T] is a transformation matrix, and [T]'^ is an inverse 
transformation matrix. 

13. An unauthorized-alteration detecting method according 
25 to one of Claims 1 to 3, wherein the randomizing function 

uses the value of the modulus P and/or a pixel value in an 
adjacent block or a pixel value in a predetermined block 
which is not changed by an embedding process, as a pcireimeter. 
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and determines the position uniquely. 

14. An unauthorized-alteration detecting method according 
to one of Claims 1 to 3, wherein the randomizing function Is 
specified by the following expressions. 

X -ra;/(P, 2, J, (0,0)) (10) 
2/'= V(P,2,j,/m(0,0)) (11) 
l = j-l (mod L) (12) 

15. An unauthorized- alteration detecting program for making 
a computer execute each of the following steps, the 
following steps Including: 

a step In which a processing section specifies a 
modulus P, an order N, and a root a, which are pareimeters of 
number theoretic transform; 

a step In which the processing section reads from a 
storage section an original -Image block fi,j(x, y) obtained 
by block- dividing an original Image [f ] to which embedding 
Is to be applied; 

a step In which the processing section uses the modulus 
P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -Image block fi,j(x, 
y) to calculate the number-theoretic-transformed block Fi,j{x, 
y) of the original- Image block; 

a step In which the processing section determines an 
embedding position (x" , y') of a signature Image In each 
block according to a predetermined randomizing function; 

a step In which the processing section reads from the 
storage section a pixel value gi^j of the signature Image to 
be embedded; 

a step In which the processing section obtains an 




embedding amount 8 in each block from the number- theoretic- 
transformed block Fi,j(x' , y") of the original -image block at 
the embedding position, the pixel value gi.j of the signature 
image, and embedding strength e; 
5 a step in which the processing section adds or 

subtracts the embedding amount 8 to or from the number- 
theoretic- transformed block Fi,j(x, y) of the original -image 
block, based on (x, y) to obtain the number- theoretic - 
transformed block Hi,j(x, y) of an embedding -applied- image 
10 block; 

a step in which the processing section applies inverse 
number theoretic transform to the number-theoretic- 
transformed block Hi,-j(x, y) to obtain the embedding -applied- 
image block hi,j(x, y); and 

15 a step in which the processing section obtains the 

embedding- applied- image block hi,j(x, y) for each of all (i, 
3) blocks or a desired range of (i, j) blocks to obtain an 
embedding -applied image [h] , and stores it in the storage 
section and/or outputs it from an output section or an 

20 interface. 

16. An unauthorized-alteration detecting program for making 
a computer execute each of the following steps, the 
following steps including: 

25 a step in which a processing section reads from a 

storage section, an input section, or an interface an 
embedding- applied- image block hi.jCx, y) obtained by block- 
dividing an embedding -applied image [h] ; 

a step in which the processing section specifies a 

30 modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

a step in which the processing section applies the 




number theoretic transform to the embedding -applied- image 
block hi,j(x, y) to calculate the number - theoretic- 
transformed block Hi^^Cx, y) of the embedding- applied- image 
block; 

5 a step in which the processing section determines an 

extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function; 

a step in which the processing section obtains a 
10 remainder by dividing the number- theoretic-transformed block 
Hi,j(x', y') at the extraction position by embedding strength 
e to extract a pixel value gi,j of the signature image; and 

a step in which the processing section obtains the 
pixel value gi^j of the signature image in each of all (i, 3) 
15 blocks or a desired range of (i, j) blocks to obtain the 
signature image [g], and stores it in the storage section 
and/ or outputs it from a display section, an output section, 
or an interface. 

20 17. An unauthorized- alteration detecting progrcun for making 
a computer execute an embedding process for embedding a 
signature image into an original image and an extraction 
process for extracting the signature image, 

wherein the embedding process comprises: 
25 a step in which a processing section specifies a 

modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

a step in which the processing section reads from a 
storage section an original -image block fi,j(x, y) obtained 
30 by block- dividing an original image [f] to which embedding 
is to be applied; 

a step in which the processing section uses the modulus 



P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -Image block fi,j(x, 
y) to calculate the number- theoretic- transformed block Fi,j(x, 
y) of the original -Image block; 
5 a step In which the processing section determines an 

embedding position (x' , y* ) of a signature Image In each 
block according to a predetermined randomizing function; 

a step In which the processing section reads from the 
storage section a pixel value gi,j of the signature Image to 

10 be embedded; 

a step In which the processing section obtains an 
embedding amount 6 in each block from the number- theoretic- 
transformed block Fi,j(x', y' ) of the original -Image block at 
the embedding position, the pixel value gi.^ of the signature 

15 Image, and embedding strength e; 

a step In which the processing section adds or 
subtracts the embedding amount 8 to or from the number- 
theoretic -transformed block Fi,j(x, y) of the original -Image 
block, based on (x, y) to obtain the number- theoretlc- 

20 transformed block Hi,:j(x, y) of an embeddlng-applled-lmage 
block; 

a step In which the processing section applies Inverse 
number theoretic transform to the number- theoretic- 
transformed block Hi,j(x, y) to obtain the embeddlng-applled- 

25 Image block hi,j(x, y) ; and 

a step In which the processing section obtains the 
embeddlng-applled-lmage block hi,j(x, y) for each of all (1, 
3) blocks or a desired range of (1, j) blocks to obtain an 
embedding -applied image [h] , and stores it in the storage 

30 section and/or outputs it from an output section or an 
Interface, 
and 



the extraction process comprises: - ^ - ^ .:^^JJ:y g 

a step In which the processing section reads from the 
storage section, the Input section, or the interface an 
embedding-applled-lmage block hi,.j(x, y) obtained by block- 
5 dividing an embedding -applied Image [h]; 

a step In which the processing section specifies a 
modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

a step In which the processing section applies the 
10 number theoretic transform to the embedding- applied- Image 
block hi,j(x, y) to calculate the number -theoretic- 
transformed block Hi.j(x, y) of the embedding- applied- Image 
block; 

a step in which the processing section determines an 
15 extraction position (x' , y* ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function; 

a step in which the processing section obtains a 
remainder by dividing the number- theoretic -transformed block 
20 Hi,3(x', y' ) at the extraction position by embedding strength 
8 to extract a pixel value gi,^ of the signature image; and 

a step in which the processing section obtains the 
pixel value gi,j of the signature image in each of all (1, j) 
blocks or a desired range of (1, j) blocks to obtain the 
25 signature image [g], and stores it in the storage section 
and/or outputs it from a display section, the output section, 
or the interface. 

18. A recording medium having recorded an unauthorlzed- 
30 alteration detecting program for making a computer execute 
each of the following steps, the following steps including: 

a step in which a processing section specifies a 



modulus P, an order N, and a root a, which are parameters of 
niomber theoretic transform; 

a step In which the processing section reads from a 
storage section an original -image block fi,j(x, y) obtained 
5 by block -dividing an original image [f] to which embedding 
is to be applied; 

a step in which the processing section uses the modulus 
P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -image block fi,j(x, 
10 y) to calculate the n\amber-theoretic-transf ormed block Fi,j(x, 
y) of the original -image block; 

a step in which the processing section determines an 
embedding position (x' , y') of a signature image in each 
block according to a predetermined randomizing function; 
15 a step in which the processing section reads from the 

storage section a pixel value gi,^ of the signature image to 
be embedded; 

a step in which the processing section obtains an 
embedding cimount 8 in each block from the number- theoretic - 

20 transformed block Fi.j(x', y' ) of the original -image block at 
the embedding position, the pixel value gi.j of the signature 
image, and embedding strength e; 

a step in which the processing section adds or 
subtracts the embedding amount 6 to or from the number- 

25 theoretic- transformed block Fi,j(x, y) of the original -image 
block, based on (x, y) to obtain the number- theoretic- 
transformed block Hi,j(x, y) of an embedding -applied- image 
block; 

a step in which the processing section applies inverse 
30 number theoretic transform to the number -theoretic- 
transformed block Hi,j(x, y) to obtain the embedding -applied - 
image block hi,j(x, y); and 




a step in which the processing section obtains the 
embedding- applied- image block hi,j(x, y) for each of all (i, 
3) blocks or a desired range of (i, j) blocks to obtain an 
embedding -applied image [h] , and stores it in the storage 
5 section and/or outputs it from an output section or an 
interface • 

19. A recording medium having recorded an unauthorized- 
alteration detecting program for making a computer execute 

10 each of the following steps, the following steps including: 

a step in which a processing section reads from a 
storage section, an input section, or an interface an 
embedding-applied-image block hi,-j(x, y) obtained by block- 
dividing an embedding -applied image [h] ; 

15 a step in which the processing section specifies a 

modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 

a step in which the processing section applies the 
number theoretic transform to the embedding-applied-image 

20 block hi,3(x, y) to calculate the number -theoretic- 
transformed block Hi,3(x, y) of the embedding-applied-image 
block; 

a step in which the processing section determines an 
extraction position (x' , y' ) corresponding to an embedding 
25 position of a signature image according to a predetermined 
randomizing function; 

a step in which the processing section obtains a 
remainder by dividing the number-theoretic-transformed block 
Hi,j(x' , y' ) at the extraction position by embedding strength 
30 E to extract a pixel value gi,j of the signature image; and 

a step in which the processing section obtains the 
pixel value gi^j of the signature image in each of all (i, j) 




blocks or a desired rangre of (1, j) blocks to obtain the 
signature Image [g] , and stores It In the storage section 
and/or outputs It from a display section, an output section, 
or an Interface. 

5 

20. A recording medium having recorded an unauthorized- 
alteration detecting program for making a computer execute 
an embedding process for embedding a signature image into an 
original image and an extraction process for extracting the 
10 signature image, 

wherein the embedding process comprises: 

a step in which a processing section specifies a 
modulus P, an order N, and a root a, which are parameters of 
number theoretic transform; 
15 a step in which the processing section reads from a 

storage section an original -image block fi,j(x, y) obtained 
by block -dividing an original image [f] to which embedding 
is to be applied; 

a step in which the processing section uses the modulus 
20 P, the order N, and the root a specified, to apply the 
number theoretic transform to the original -image block fi,j(x, 
y) to calculate the number- theoretic- transformed block Fi,j(x, 
y) of the original -image block; 

a step in which the processing section determines an 
25 embedding position (x' , y' ) of a signature image in each 
block according to a predetermined randomizing function; 

a step in which the processing section reads from the 
storage section a pixel value gi.j of the signature image to 
be embedded; 

30 a step in which the processing section obtains an 

embedding amount 6 in each block from the number- theoretic - 
transformed block Fi.j(x' , y' ) of the original -image block at 
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the embedding position, the pixel value gi,^ of the signature 
Image, and embedding strength e; 

a step In which the processing section adds or 
subtracts the embedding amount 6 to or from the number- 
5 theoretic -transformed block Pi.j(x, y) of the original -Image 
block, based on (x, y) to obtain the number- theoretic- 
transformed block Hi,j(x, y) of an embedding -applied -Image 
block; 

a step In which the processing section applies Inverse 
10 number theoretic transform to the number -theoretic- 
transformed block Hi,3(x, y) to obtain the embedding -applied- 
Image block hi.j(x, y); and 

a step In which the processing section obtains the 
embedding- applied- Image block hi,j(x, y) for each of all (1, 
15 j) blocks or a desired range of (1, 3) blocks to obtain an 
embedding -applied Image [hi , and stores It In the storage 
section and/or outputs It from an output section or an 
Interface, 
and 

20 the extraction process comprises : 

a step In which the processing section reads from the 

storage section, the Input section, or the Interface an 

embeddlng-applled-lmage block hi.j(x, y) obtained by block- 

dlvldlng an embedding -applied Image [h]; 
25 a step In which the processing section specifies a 

modulus P, an order N, and a root a, which are parameters of 

number theoretic transform; 

a step In which the processing section applies the 

number theoretic transform to the embeddlng-applled-lmage 
30 block hi,j{x, y) to calculate the number- theoretic - 

transformed block Hi,j(x, y) of the embeddlng-applled-lmage 

block; 



a step in which the processing section determines an 
extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function; 

a step in which the processing section obtains a 
remainder by dividing the number-theoretic-transformed block 
Hi,j(x' , y') at the extraction position by embedding strength 
e to extract a pixel value gi,j of the signature image; and 

a step in which the processing section obtains the 
pixel value gi,j of the signature image in each of all (1, J) 
blocks or a desired range of (1, j) blocks to obtain the 
signature image [g], and stores it in the storage section 
and/or outputs it from a display section, the output section, 
or the interface* 



